Libxmljs Project vulnerabilities
We track 4 vulnerabilities in Libxmljs Project products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on December 26, 2025.
Latest Libxmljs Project vulnerabilities
- 7.5 High severity
Libxmljs: Uncontrolled Resource Consumption
A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal _ref property on entity_ref and entity_decl nodes causes a segmentation fault, potentially leading to a denial-of-service (DoS).
- 8.1 High severity
libxmljs: Access of Resource Using Incompatible Type
libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs() that was called on a parsed node. This vulnerability might lead to denial of service (on both 32-bit systems and 6
- 9.8 Critical severity
libxmljs: Access of Resource Using Incompatible Type
libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which invokes _wrap__xmlNode_nsDef_get()) on a grand-child of a node that refers to an entity. This vulnerability can lead t
- 9.8 Critical severity
libxmljs: Access of Resource Using Incompatible Type
libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs() that was called on a parsed node. This vulnerability might lead to denial of service (on both 32-bit systems and 64